site. Once near the site, AutoGNC 
achieves a prescribed guidance condi- 
tion for TAG sampling (position/ orien- 
tation, velocity), and a prescribed force 
profile on the sampling end-effector. A 
dedicated 6DOF TAG control then im- 
plements the ascent burn while recover- 
ing from sampling disturbances and in- 
duced attitude rates. The control also 
minimizes structural interactions with 
flexible solar panels and disallows any 


part of the spacecraft from making con- 
tact with the ground (other than the in- 
tended end-effector) . 

T his work was done by John M . Carson, 
Nickolaos M astrodemos, David M. Myers, 
Behcet Acikmese, James C. Blackmore, 
Dhemetrio Boussalis, Joseph E. Riedel, 
Simon Nolet, Johnny T. Chang, Milan 
M andic, Laureano (Al> Cangahuala, 
Stephen B. Broschart, David S. Bayard, An- 
drew T. Vaughan, Tseng-Chan M. Wang, 


and Robert A. Werner of Caltech; Christo- 
pher A, Grasso of BlueSun Enterprises; and 
Gaskdl W. Robert of the Planetary Science 
Institute for NASA's Jet Propulsion Labora- 
tory. Further information is contained in a 
TSP (seepagel). 

The software used in this innovation is 
available for commercial licensing. Please 
contact Daniel Broderick of theCalifornia In- 
stitute of Technology at danieib@caltech.edu. 
Refer to NPO-47250. 


Efficient Web Services Policy C ombination 

This algorithm serves as the basis for reliable, fast, and automatic network communications. 

NASA's Jet Propulsion Laboratory, Pasadena, California 


Large-scale Web security systems usu- 
ally involve cooperation between do- 
mains with non-identical policies. The 
network management and Web commu- 
nication software used by the different 
organizations presents a stumbling 
block. Many of the tools used by the var- 
ious divisions do not have the ability to 
communicate network management 
data with each other. At best, this means 
that manual human intervention into 
the communication protocols used at 
various network routers and endpoints 
is required. Developing practical, 
sound, and automated ways to compose 
policies to bridge these differences is a 
long-standing problem. One of the key 
subtleties is the need to deal with incon- 
sistencies and defaults where one organ- 
ization proposes a rule on a particular 
feature, and another has a different rule 
or expresses no rule. A general ap- 
proach is to assign priorities to rules 
and observe the rules with the highest 
priorities when there are conflicts. 

The present methods have inherent in- 
efficiency, which heavily restrict their 
practical applications. A new, efficient al- 
gorithm combines policies utilized for 


Web services. The method is based on an 
algorithm that allows an automatic and 
scalable composition of security policies 
between multiple organizations. It is 
based on defeasible policy composition, a 
promising approach for finding conflicts 
and resolving priorities between rules. 

In the general case, policy negotia- 
tion is an intractable problem. A prom- 
ising method, suggested in the litera- 
ture, is when policies are represented 
in defeasible logic, and composition is 
based on rules for non-monotonic in- 
ference. In this system, policy writers 
construct metapolicies describing both 
the policy that they wish to enforce and 
annotations describing their composi- 
tion preferences. These annotations 
can indicate whether certain policy as- 
sertions are required by the policy 
writer or, if not, under what circum- 
stances the policy writer is willing to 
compromise and allow other assertions 
to take precedence. Meta-policies are 
specified in defeasible logic, a computa- 
tionally efficient non-monotonic logic 
developed to model human reasoning. 

One drawback of this method is that 
at one point the algorithm starts an ex- 


haustive search of all subsets of the set of 
conclusions of a defeasible theory. Al- 
though the propositional defeasible 
logic has linear complexity, the set of 
conclusions here may be large, espe- 
cially in real-life practical cases. This 
phenomenon leads to an inefficient ex- 
ponential explosion of complexity. 

The current process of getting a Web 
security policy from combination of two 
meta-policies consists of two steps. The 
first isgenerating a new meta-policy that 
is a composition of the input meta-poli- 
cies, and the second is mapping the 
meta-policy onto a security policy. The 
new algorithm avoids the exhaustive 
search in the current algorithm, and 
provides a security policy that matches 
all requirements of the involved meta- 
policies. 

T his work was done by Farrokh Vatan and 
Joseph G. H arman of Caltech for NASA's Jet 
Propulsion Laboratory. Further information is 
contained in a TSP (seepagel). 

The software used in this innovation is 
available for commercial licensing. Please con- 
tact Daniel Broderick of the California Insti- 
tute of Technology at danidb@caltech.edu. 
Refer to NPO-47279. 


©UsingCTX Image Features to Predict HiRISE-Equivalent 
Rock Density 

NASA'sJet Propulsion Laboratory, Pasadena, California 


Methods have been developed to quan- 
titatively assess rock hazards at candidate 
landing sites with the aid of images from 
the HiRISE camera onboard NASA's 
Mars Reconnaissance Orbiter. HiRISE is 
ableto resolve rocks as small as 1-m in di- 


ameter. Somesitesof interest do not have 
adequate coverage with the highest reso- 
lution sensorsand there isa need to infer 
relevant information (like site safety or 
underlying geomorphology). The pro- 
posed approach would make it possible 


to obtain rock density estimates at a level 
close to or equal to those obtained from 
high -resolution sensors where individual 
rocks are discernable. 

The low-resolution data considered 
here are CTX images, which have a 
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